{"id":"RHSA-2016:2591","summary":"Red Hat Security Advisory: krb5 security, bug fix, and enhancement update","modified":"2025-11-22T11:14:21Z","published":"2024-09-15T23:23:09Z","upstream":["CVE-2016-3119","CVE-2016-3120"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2016:2591"},{"type":"ARTICLE","url":"https://access.redhat.com/security/updates/classification/#low"},{"type":"ARTICLE","url":"https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.3_Release_Notes/index.html"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1135427"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1146945"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1183058"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1247261"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1256735"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1283902"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1284987"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1290239"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1292153"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1296241"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1297591"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1313457"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1314493"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1319616"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1340304"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349042"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1361050"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1363690"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1364993"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2591.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2016-3119"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2016-3119"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3119"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2016-3120"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2016-3120"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3120"}],"affected":[{"package":{"name":"krb5","ecosystem":"Red Hat:enterprise_linux:7::client","purl":"pkg:rpm/redhat/krb5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5-debuginfo","ecosystem":"Red Hat:enterprise_linux:7::client","purl":"pkg:rpm/redhat/krb5-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5-devel","ecosystem":"Red Hat:enterprise_linux:7::client","purl":"pkg:rpm/redhat/krb5-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5-libs","ecosystem":"Red Hat:enterprise_linux:7::client","purl":"pkg:rpm/redhat/krb5-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5-pkinit","ecosystem":"Red Hat:enterprise_linux:7::client","purl":"pkg:rpm/redhat/krb5-pkinit"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5-server","ecosystem":"Red Hat:enterprise_linux:7::client","purl":"pkg:rpm/redhat/krb5-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5-server-ldap","ecosystem":"Red Hat:enterprise_linux:7::client","purl":"pkg:rpm/redhat/krb5-server-ldap"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5-workstation","ecosystem":"Red Hat:enterprise_linux:7::client","purl":"pkg:rpm/redhat/krb5-workstation"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"libkadm5","ecosystem":"Red Hat:enterprise_linux:7::client","purl":"pkg:rpm/redhat/libkadm5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5","ecosystem":"Red Hat:enterprise_linux:7::computenode","purl":"pkg:rpm/redhat/krb5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5-debuginfo","ecosystem":"Red Hat:enterprise_linux:7::computenode","purl":"pkg:rpm/redhat/krb5-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5-devel","ecosystem":"Red Hat:enterprise_linux:7::computenode","purl":"pkg:rpm/redhat/krb5-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5-libs","ecosystem":"Red Hat:enterprise_linux:7::computenode","purl":"pkg:rpm/redhat/krb5-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5-pkinit","ecosystem":"Red Hat:enterprise_linux:7::computenode","purl":"pkg:rpm/redhat/krb5-pkinit"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5-server","ecosystem":"Red Hat:enterprise_linux:7::computenode","purl":"pkg:rpm/redhat/krb5-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5-server-ldap","ecosystem":"Red Hat:enterprise_linux:7::computenode","purl":"pkg:rpm/redhat/krb5-server-ldap"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5-workstation","ecosystem":"Red Hat:enterprise_linux:7::computenode","purl":"pkg:rpm/redhat/krb5-workstation"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"libkadm5","ecosystem":"Red Hat:enterprise_linux:7::computenode","purl":"pkg:rpm/redhat/libkadm5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5","ecosystem":"Red Hat:enterprise_linux:7::server","purl":"pkg:rpm/redhat/krb5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5-debuginfo","ecosystem":"Red Hat:enterprise_linux:7::server","purl":"pkg:rpm/redhat/krb5-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5-devel","ecosystem":"Red Hat:enterprise_linux:7::server","purl":"pkg:rpm/redhat/krb5-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5-libs","ecosystem":"Red Hat:enterprise_linux:7::server","purl":"pkg:rpm/redhat/krb5-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5-pkinit","ecosystem":"Red Hat:enterprise_linux:7::server","purl":"pkg:rpm/redhat/krb5-pkinit"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5-server","ecosystem":"Red Hat:enterprise_linux:7::server","purl":"pkg:rpm/redhat/krb5-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5-server-ldap","ecosystem":"Red Hat:enterprise_linux:7::server","purl":"pkg:rpm/redhat/krb5-server-ldap"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5-workstation","ecosystem":"Red Hat:enterprise_linux:7::server","purl":"pkg:rpm/redhat/krb5-workstation"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"libkadm5","ecosystem":"Red Hat:enterprise_linux:7::server","purl":"pkg:rpm/redhat/libkadm5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5","ecosystem":"Red Hat:enterprise_linux:7::workstation","purl":"pkg:rpm/redhat/krb5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5-debuginfo","ecosystem":"Red Hat:enterprise_linux:7::workstation","purl":"pkg:rpm/redhat/krb5-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5-devel","ecosystem":"Red Hat:enterprise_linux:7::workstation","purl":"pkg:rpm/redhat/krb5-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5-libs","ecosystem":"Red Hat:enterprise_linux:7::workstation","purl":"pkg:rpm/redhat/krb5-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5-pkinit","ecosystem":"Red Hat:enterprise_linux:7::workstation","purl":"pkg:rpm/redhat/krb5-pkinit"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5-server","ecosystem":"Red Hat:enterprise_linux:7::workstation","purl":"pkg:rpm/redhat/krb5-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5-server-ldap","ecosystem":"Red Hat:enterprise_linux:7::workstation","purl":"pkg:rpm/redhat/krb5-server-ldap"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"krb5-workstation","ecosystem":"Red Hat:enterprise_linux:7::workstation","purl":"pkg:rpm/redhat/krb5-workstation"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}},{"package":{"name":"libkadm5","ecosystem":"Red Hat:enterprise_linux:7::workstation","purl":"pkg:rpm/redhat/libkadm5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-26.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2016:2591.json"}}],"schema_version":"1.7.3","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}